Effective Date: October 2026

Platform URL: alosho.com

Support Desk: support@alosho.com

At Alosho, safeguarding our customers' financial information and delivering a frictionless, highly secure checkout experience is fundamental to our operations. This Payment & Security Standards policy outlines our accepted transaction methods, data encryption protocols, fraud prevention frameworks, and customer responsibilities in compliance with the financial regulations of Pakistan and global payment security standards.

1. ACCEPTED PAYMENT CHANNELS

To ensure complete flexibility and convenience across Pakistan, Alosho provides multiple secure digital and physical transaction channels:

1.1. Cash on Delivery (COD):

• Available nationwide across supported courier coverage zones.
• Payment must be remitted in physical Pakistani Rupee (PKR) cash directly to the authorized courier delivery agent prior to unsealing the package.
• High-value consignments (orders exceeding PKR 15,000) may require an advance security deposit or partial prepayment prior to dispatch to safeguard against transit refusal.

1.2. Debit & Credit Cards:

• We accept all local and international cards authorized for online transactions, including Visa, Mastercard, UnionPay, and PayPak.
• Transactions are settled in Pakistani Rupees (PKR) without unauthorized foreign conversion surcharges for domestic bank cards.

1.3. Digital Wallets & Instant Account Transfers:

• We support instant mobile wallet checkouts via JazzCash, Easypaisa, and SadaPay/Nayapay.
• Fast peer-to-merchant settlements via Raast (State Bank of Pakistan instant payment system) and 1Link member bank transfers are supported through our integrated payment interfaces.

2. DATA ENCRYPTION & INFRASTRUCTURE SECURITY

2.1. End-to-End Encryption (E2EE): All sessions, user account interactions, and financial transactions on the Alosho mobile platform and web storefront are encrypted using industry-standard Transport Layer Security (TLS 1.3 / 256-bit SSL encryption). This ensures that personal information and transaction payloads transmitted between your device and our servers cannot be intercepted, read, or modified by unauthorized third parties.

2.2. Zero Local Storage of Cardholder Data: Alosho strictly adheres to zero-liability payment handling. We do not store, log, capture, or retain sensitive card details, including full 16-digit Primary Account Numbers (PAN), expiration dates, or 3-digit Card Verification Value (CVV/CVC) numbers on our internal databases or local servers.

2.3. Secure Tokenization: For repeat checkout convenience, cardholder credentials are processed exclusively via tokenization through our licensed gateway partners. Alosho only retains non-sensitive, encrypted tokens and truncated card identifiers (e.g., "Card ending in 4321") for customer display purposes.

3. REGULATORY COMPLIANCE & GATEWAY PARTNERS

3.1. PCI-DSS Level 1 Certification: All online card payments executed on Alosho are routed through payment service providers (PSPs) and acquiring banks that maintain full Payment Card Industry Data Security Standard (PCI-DSS) Level 1 compliance—the highest level of certification in the global payments industry.

3.2. State Bank of Pakistan (SBP) Alignment: Our payment infrastructure operates in strict adherence to the Payment Systems and Electronic Fund Transfers Act, 2007 and operating directives issued by the State Bank of Pakistan (SBP) governing Electronic Money Institutions (EMIs) and Payment Service Operators/Providers (PSO/PSPs).

3.3. Two-Factor Authentication (3D Secure 2.0): All domestic and international online card payments require mandatory multi-factor authorization. You will be redirected by your issuing bank's secure interface to confirm transactions via an SMS One-Time Password (OTP), mobile banking biometrics, or email verification. Transactions failing 3DS authentication are automatically rejected.

4. FRAUD DETECTION, RISK MITIGATION & BUYER PROTECTION

4.1. Automated Risk Engine: Alosho deploys algorithmic fraud monitoring to detect anomalies in purchasing patterns, including bot-driven bulk attempts, mismatched IP and billing locations, velocity threshold violations, and suspicious card combinations. Transactions flagged as high-risk are instantly placed on temporary hold for operational verification or rejected outright.

4.2. COD Verification & Anti-Abuse Protocols:

• To prevent bogus orders and commercial sabotage, first-time COD purchasers or large orders are subject to automated verification via phone call, WhatsApp confirmation, or SMS OTP verification.
• Customers who repeatedly place COD orders and intentionally refuse delivery at their doorstep cause malicious logistical freight losses. Such accounts and associated phone numbers, devices, and delivery addresses are permanently restricted from utilizing Cash on Delivery and limited exclusively to prepaid channels.

4.3. Chargeback & Dispute Inquiries: In the event of an unrecognized transaction appearing on your bank or wallet statement bearing an Alosho reference, customers are urged to notify our support team at support@alosho.com immediately. We coordinate directly with acquiring banks to investigate chargebacks, provide delivery proofs, or process rapid reversals where unauthorized card use is established.

5. CURRENCY, BILLING & PRICE TRANSPARENCY

5.1. Transparent Invoicing: The final amount displayed on your checkout screen is the definitive total payable. Alosho does not impose concealed checkout surcharges, platform maintenance fees, or unlisted handling taxes.

5.2. Bank Charges Disclaimer: While Alosho bills strictly in PKR, certain issuing banks may levy standard transactional fees, interbank transfer levies, or cross-border processing charges depending on your specific bank account tier and payment card type. These fees are determined entirely by your issuing bank.

6. CUSTOMER SECURITY RESPONSIBILITIES

To maintain the integrity of your personal account, you agree to:

• Never share your Alosho login password, OTP verification codes, or bank security credentials with anyone, including individuals claiming to represent Alosho customer service.
• Use a strong, unique password for your Alosho profile and update it periodically.
• Immediately alert support@alosho.com if you suspect that your account has been accessed without your consent or if your device has been compromised.

7. CONTACT SECURITY & COMPLIANCE

For queries regarding payment settlements, failed transactions, billing reconciliations, or platform security concerns:

• Compliance & Financial Operations: Alosho Pakistan
• Official Support Email: support@alosho.com
• Operational Base: Lahore, Pakistan